IN THE CLAIMS 

This listing of the claim will replace all prior versions and listings of claim in 
the present application. 
Listing of Claims 

1 . (currently amended)A communication system having tunnels formed 
on a physical communication line and having a plurality of sessions in each said 
tunnel, comprising: 

an authentication unit which authenticates the user using a plurality of tunnels 
to see -determine if said user is a customer of a_service of reserving sessions in a 
smaller number of tunnels in exchange for a specified service fee; 

a decision unit for, when said user was-is_authenticated as a customer of said 
service by said authentication unit, monitoring the state of use of tunnels and 
sessions used by said user and deciding whether or not the sessions currently used 
by said user can be reserved in a-fewer tunnels; 

a tunnel control unit which controls the tunnels such that a plurality of 
sessions used by said user are gathered in a specified tunnel when said decision 
unit decides that said sessions can be reserved in a-fewer tunnels; and 

a charging unit which charqs charges usage fees according to the number of 
tunnels or the number of physical communication lines. 

2. (currently amended)A communication system having comprising: 
a first server for accommodating user terminalsy; and 
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a second server^ connected through a first network with said first server, for 
forming a tunnel in said first network in cooperation with said first server and 
connecting said user terminals to a second network through said tunnel, 

wherein said first server comprises; 

a first interface for connection to said user terminalsi^ 

an authentication unit for authenticating a user of a terminal requesting to be 
connected through said first interfacei^ 

a first tunnel unit for forming^ between said first server and said second 
server^ a said tunnel for ostabl i sh i ng to establish a session for said authenticated 
user, and outputting packets received from said first interfacei^ 

a second interface for transferring packets output from said first tunnel unit 
through said tunnel formed on said first network!^ and 

a control unit for monitoring said session and controlling said first tunnel unit 
to reserve said session for said authenticated user us e r's sess i ons in a-fewer 
tunnels, and 

wherein said second sen/er comprises: 

a third interface for connection to said first networki^ 

a second tunnel unit for forming^ between said first server and said second 
server^ a -said tunnel for establishing a session for said authenticated user, 
d e capsulat e s th e decapsulating encapsulated packets received from said third 
interface and outputting the decapsulated packets^, and 

a fourth interface for transferring the decapsulated packets output from said 
second tunnel unit to said second network. 
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3. (currently amended)A communication system according to Claim 2, 
wherein said control unit determines a tunnel where a session was disconnected out 
of a plurality of tunnels, and controls said first tunnel unit to shift a session in another 
tunnel to the tunnel where the session was th e r e i s said disconnected s e ssion . 

4. (currently amended)A communication system according to Claim 3, 
wherein said first server further comprises; 

a storage unit for storing an administration table for administrating said 
tunnels, and 

wherein said control unit generates said administration table, and administers 
the establishment of said tunnels and the-reserving of said sessions according to 
said administration table. 

5. (currently amended)A communication system according to Claim 4, 
wherein said control unit detects disconnection of a session, registers the 
disconnected session in said administration table, searches said administration table 
for a session on another tunnel movable to the tunnel where said session was 
disconnected, and transmits a session switchover message, including identification 
information of a searched-out session, to said second server, and 

wherein said second server, in response to said switchover message, moves 
the session on the other tunnel to the tunnel where said session was disconnected. 
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6. (currently amended)ln a virtual private network, a communication 
method for e ncapsu l at i ng transferring packets received by a first communication 
interface and transf e rr i ng e ncapsu l at e d packets through a second communication 
interface, said communication method comprising the steps of: 

reserving a first logical path on a first physical communication line connected 
to said second interface; 

reserving a first session on said first logical path; 

reserving a second logical path on a second physical communication line 
connected to said second interface; 

reserving a second session on said second logical path; 

monitoring a bandwidth of said first logical path; and 

when thoro i s some spare bandwidth to sparo exists on said t he-first logical 
path fowd- determined as a result of said monitoring step of sa i d first logica l path , 
reserving ovor again the -said second session, horotoforo w hich was previously 
reserved on the -said second logical path, this tim e i n th e on said first logical path 
according to tl=>e-a_degree of ava il ab i l i tv available bandwidth on said first logical path . 

7. (currently amended)A communication method according to Claim 6, 
wherein said step of reserving the first session on said first logical path comprises 

the steps of: 

reading the-a_state of use of the- said first logical path from the-a_first storage 
unit where the state of use of the- said first logical path is storedj^ 
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deciding whether or not a new session can be reserved on said first logical 
path based on the state of use from th e se rv i c e cond i t i on read i, and 

when the decision is that a new session can be reserved, registering a new 
session to be reserved in said first storage unity; 

wherein said step of reserving the second session on said second logical path 
comprises: 

reading the-a^state of use of said second logical path from the-a_second 
storage unit where the state of use of the- said second logical path is storedi^ 

deciding from the state of use read whether or not a new session can be 
reserved on said second logical pathj , and 

when the decision is that a new session can be reserved, registering a new 
session to be reserved in the -said second storage unitji and 

wherein said step of monitoring the bandwidth of the- said first logical path 
comprises: 

reading the state of use of thesaid first logical path from the first storage unit 
for administrating the-aLservice condition of said first logical pathi^ and 

deciding from the state of use read whether or not a new session can be 
reserved on said first logical path. 

8. (currently amended)A communicating method according to Claim 6, 
further comprising the steps of: 

allocating a service level to said session, 
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wherein said step of monitoring the bandwidth of the -said first logical path 
monitors is mon i toring th e a total ef-service level of sessions reserved on said first 
logical path, and 

wherein said step of reserving the session, h e r e tofor e previously reserved on 
said second logical path, this tim e in tho on said first logical path further comprises: 

calculating a ll ocab l o a_service level from the sum o f total service level of said 
session and all service tevel -levels allocable to said logical path, 

comparing the service level of the session reserved on said second logical 
path with said- the calculated service level, and 

when, according to the-a_result of said compar i son comparing step , the service 
level of the second logical path reserved on the second physical line is not higher 
than said- the calculated service level, reserving again the session, h e r e tofor e 
previouslv reserved on said second logical path, this tim e i n o n said first logical path. 

9. (currently amended)A communication method according to Claim 1 , 
wherein said step of reserving aga i n the session, h e r e tofor e previouslv reserved on 
said second logical path, th i s t i m e i n on said first logical path comprises the steps of: 

reserving a new session on said first logical path, 

transferring packets, h e r e tofor e previously transmitted through the session 
reserved on said second logical path, this tim e through a new session reserved on 
said first logical path, and 

disconnecting the session reserved on said second logical path. 
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10. (currently amended)A communication method according to Claim 9, 
further comprising the steps of: 

allocating a_service level to said session; 
monitoring the traffic of said session; and 

when the traffic of said session does not match the allocated service level, 
adjusting the service level of said session to match the traffic, 

1 1 . (currently amended)A communication method according to Claim 10. 
wherein said step of adjusting said service level of said session to match the traffic is 
to decroaso decreases the service level of said session when the traffic of said 
session is lower than a threshold value, or to i ncr e as e increases the service level of 
said session when the traffic of said session is higher than the threshold value. 

12. (currently amended)A communication system for building a VPN, 
comprising: 

a first interface which connects to a user terminal through a communication 

line; 

an authenticating unit which authenticates a user requesting a connection 
through said first interface; 

a tunnel unit which forms a tunnel for establishing a session for said 
authenticated user, and encapsulating and outputting packets received from said first 
interface; 
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a second interface which transfers packets, output from said tunnel unit, to 
another network; and 

a control unit which monitors said sessions^ and control li ng controls said 
tunnel unit to reserve sessions in a fewer tunnels. 

13. (currently amended)A communication system according to Claim 12, 
wherein said control unit controls said tunnel unit to determine a tunnel where a 
session was disconnected, out of a plurality of tunnels^ and move a session on 
another tunnel to the tunnel where the session was disconnected. 

14. (currently amended)A communication system according to Claim 13, 
further comprising: 

a storage unit for storing an administration table to administer said tunnel, 
wherein said control unit generates said administration table and administers 

the-establishment of said tunnel and the-reservation of said session according to 

said administration table. 

15. (currently amended)A communication system according to Claim 14, 
wherein said control unit detects the-disconnection of a session, registers the 
disconnected session in said administration table, searches said administration table 
for a session on another tunnel likely to be able to be sbtft- shifted to the tunnel where 
said session was disconnected, generates a session switchover message, including 
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identification information about the searched-out session, and transmits said session 
switchover message from said second interface. 

16. (currently amended)A computer-readable recording medium for storing 
a program instructing a computer to execute steps i n a commun i cation method for 
transferring e ncapsu l at i ng packets received from a first communication interface 
and transferr i ng oncapsu l atod packets through a second communication interface, 
said steps comprising: 

reserving a first logical path on a first physical line connected to said second 
interface; 

reserving a first session on said first logical path; 

reserving a second logical path on a second physical path connected to said 
second interface; 

reserving a second session on said second logical path; 
monitoring the bandwidth of said first logical path; and 

when asome spare bandwidth exists to spar e i s found on said first logical path 
determined as the-a_result of said monitoring step sa i d first l ogica l path , reserving 
said second session, heretofor e previously reserved on said second logical path, this 
t i m e on said s e cond first logical path according to the-a_degree of room i n 
the available bandwidth on said first logical path . 

Claims 17-19 (canceled). 
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